Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/84e22bbc-c01b-34a8-91c7-18365df93296.roa
File:                     84e22bbc-c01b-34a8-91c7-18365df93296.roa (raw, json)
Hash identifier:          kDH5npeBZnQSXEAiLyvNx7WBul36O7monn6t93QLJds=
Subject key identifier:   8E:6E:3F:2F:67:46:57:24:3A:D1:BF:6D:5A:68:44:66:67:03:C5:93
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583CB7FFEAE024326113BFC00100
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/84e22bbc-c01b-34a8-91c7-18365df93296.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Tue 30 Apr 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        2606:18c0:28::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b7:ff:ea:e0:24:32:61:13:bf:c0:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Apr 30 04:00:00 2024 GMT
        Subject: CN=bb404621-9f05-4157-8658-163b54cd6701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:c2:bd:1a:31:4f:23:97:6a:42:54:cd:cc:
                    69:b1:a7:76:4a:4f:ef:71:c9:03:f5:27:83:d0:ce:
                    7a:0c:d4:93:75:1f:d9:7b:68:5b:9a:20:b7:d5:af:
                    78:54:6a:33:12:3e:94:33:17:61:d2:71:5f:92:25:
                    7a:7b:93:4a:de:f5:41:e6:1f:b5:bb:fe:35:59:da:
                    a5:9c:4f:da:fc:cd:09:9d:1e:c8:65:fe:b3:47:f1:
                    6c:27:03:7e:cb:9e:83:18:f1:d4:16:e6:30:f3:42:
                    68:3d:1b:5b:e9:e9:a9:9a:83:a9:93:66:ba:f2:b0:
                    50:66:6c:25:cc:4d:72:50:7b:9a:66:6b:a8:ac:55:
                    e9:84:0f:bc:3c:29:af:a1:07:82:4a:77:97:ef:1f:
                    17:cf:aa:3a:ce:12:e0:be:aa:dd:db:af:19:15:5f:
                    47:5b:54:d3:10:76:96:d7:89:b6:c0:ed:2d:bc:88:
                    9a:6d:4a:f5:b5:1a:7d:4c:55:3b:97:36:c7:f6:02:
                    d4:d8:8b:6d:db:88:d3:fb:dd:b4:76:ed:f8:44:9d:
                    4a:38:9b:1a:f7:6c:3b:4b:41:bd:4f:af:3a:9c:73:
                    57:20:d6:33:d1:8e:b9:d1:06:16:55:89:1f:82:25:
                    88:ef:9a:89:9a:f4:10:53:9e:f0:4e:44:25:84:f8:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6E:3F:2F:67:46:57:24:3A:D1:BF:6D:5A:68:44:66:67:03:C5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/84e22bbc-c01b-34a8-91c7-18365df93296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:77:f5:2e:aa:30:b8:99:07:d9:a8:7d:82:2e:61:41:3e:89:
         55:a2:11:6a:fd:07:03:8f:46:a1:db:1d:4c:16:c6:b2:c0:45:
         a9:42:60:73:36:26:ce:f5:9f:b0:97:c8:b7:42:ba:55:62:10:
         ac:d8:40:86:14:9e:0b:c7:e8:91:d7:1e:98:24:98:6b:ef:43:
         b3:9f:48:20:3f:1c:39:50:c8:c0:1e:2a:22:78:20:5f:5a:73:
         85:ee:18:e7:76:d8:44:4f:4b:49:54:c4:4c:85:9a:fe:45:f7:
         87:65:5a:7b:39:28:4d:89:9c:f8:cd:8a:8e:31:99:a8:57:28:
         3b:86:85:c1:29:33:1f:ef:2e:d5:47:98:11:90:ac:48:88:7f:
         3d:d2:53:84:12:67:1d:4a:50:32:e9:83:fe:57:97:8b:9c:4f:
         a7:35:f4:09:c1:5d:6a:ed:5c:e6:e3:c8:87:26:a2:dc:c4:f0:
         58:62:28:b2:a0:3e:0f:eb:9d:1c:9b:a9:46:c1:a6:24:bc:77:
         99:e5:94:91:46:93:c6:0d:06:2b:40:ef:f5:f1:ff:1d:47:da:
         58:14:15:8b:3e:a2:99:32:ff:14:6a:19:52:c1:df:5d:5c:01:
         d0:a2:3a:8d:16:70:5a:28:7d:8c:4c:6c:6d:24:50:41:16:87:
         c8:22:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:24 2024 by rpki-client on console-ams.rpki-client.org